prd-tmp.cdn.gowhere.gov.sg

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 0e:b5:8b:ff:59:80:27:0b:2d:a9:19:a2:e3:ea:45:e6 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=prd-tmp.cdn.gowhere.gov.sg

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:b5:8b:ff:59:80:27:0b:2d:a9:19:a2:e3:ea:45:e6
Serial Number (int): 19551837158199067498519923269156095462
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 89:31:94:38:24:be:1e:2a:5d:e4:18:2e:ea:63:c8:3c:44:c4:52:1c
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 49:1e:15:3d:bd:cb:6e:ca:48:86:63:7f:13:a8:b8:04:23:2c:0d:0d
Fingerprint (sha256): 50:bd:54:ab:7f:2b:ca:3f:af:f6:a4:d0:46:b4:a3:fd:4b:14:de:f1:ab:9d:b4:b0:a7:93:9d:34:f8:07:10:fd

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate prd-tmp.cdn.gowhere.gov.sg

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prd-tmp.cdn.gowhere.gov.sg

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

prd-tmp.cdn.gowhere.gov.sg

Other certificates including the domain name gowhere.gov.sg

(limited to 100 certificates)
stg.mask.gowhere.gov.sg
stg.flu.gowhere.gov.sg
stg.gowhere.gov.sg
stg.supermarkettrial.gowhere.gov.sg
stg.token.gowhere.gov.sg
uat.gowhere.gov.sg
stg.api.edit.gowhere.gov.sg
stg.token.gowhere.gov.sg
gowhere.gov.sg
prd-tmp.token.gowhere.gov.sg
stg.cdn.gowhere.gov.sg
stg-2.diy.gowhere.gov.sg
uat.flu.gowhere.gov.sg
stg-tmp.api.gowhere.gov.sg
stg.cdn.gowhere.gov.sg
gowhere.gov.sg
stg.api.gowhere.gov.sg
*.gowhere.gov.sg
stg.edit.gowhere.gov.sg
stg-2.api.diy.gowhere.gov.sg
uat.diy.gowhere.gov.sg
stg.gowhere.gov.sg
prd-tmp.flu.gowhere.gov.sg
stg.api.diy.gowhere.gov.sg
stg.react.gowhere.gov.sg
stg.review.diy.gowhere.gov.sg
gowhere.gov.sg
*.gowhere.gov.sg
stg-2.review.diy.gowhere.gov.sg
uat-2.api.diy.gowhere.gov.sg
stg.diy.gowhere.gov.sg
prd-tmp.token.gowhere.gov.sg
uat.api.gowhere.gov.sg
*.gowhere.gov.sg
prd-tmp.cdn.gowhere.gov.sg
stg.api.edit.gowhere.gov.sg
uat-2.review.diy.gowhere.gov.sg
support.gowhere.gov.sg
uat.token.gowhere.gov.sg
prd-tmp.cdn.gowhere.gov.sg
uat-2.diy.gowhere.gov.sg
stg.cdn.gowhere.gov.sg
support.gowhere.gov.sg
www.token.gowhere.gov.sg
api.diy.gowhere.gov.sg
stg.token.gowhere.gov.sg
uat.api.gowhere.gov.sg
prd-tmp.cdn.gowhere.gov.sg
stg.cam-api.gowhere.gov.sg
gowhere.gov.sg
flu.gowhere.gov.sg
*.gowhere.gov.sg
support.gowhere.gov.sg
gowhere.gov.sg
www.token.gowhere.gov.sg
uat-2.gowhere.gov.sg
prd-tmp.mask.gowhere.gov.sg
prd-tmp.react.gowhere.gov.sg
api.identity.gowhere.gov.sg
stg.mask.gowhere.gov.sg
prd-tmp.api.gowhere.gov.sg
uat.react.gowhere.gov.sg
support.gowhere.gov.sg
gowhere.gov.sg
cam-api.gowhere.gov.sg
stg.gowhere.gov.sg
stg.mask.gowhere.gov.sg
stg-tmp.mask.gowhere.gov.sg
prd-tmp.react.gowhere.gov.sg
stg.react.gowhere.gov.sg
uat.token.gowhere.gov.sg
stg.mask.gowhere.gov.sg
stg.flu.gowhere.gov.sg
prd-tmp.gowhere.gov.sg
prd-tmp.react.gowhere.gov.sg
www.token.gowhere.gov.sg
uat.api.diy.gowhere.gov.sg
gowhere.gov.sg
prd-tmp.api.gowhere.gov.sg
prd-tmp.gowhere.gov.sg
prd-tmp.mask.gowhere.gov.sg
cam-api.gowhere.gov.sg
stg.gowhere.gov.sg
stg-tmp.api.gowhere.gov.sg
prd-tmp.flu.gowhere.gov.sg
stg.react.gowhere.gov.sg
diy.gowhere.gov.sg
stg-2.gowhere.gov.sg
*.gowhere.gov.sg
stg.flu.gowhere.gov.sg
uat.token.gowhere.gov.sg
gowhere.gov.sg
uat.review.diy.gowhere.gov.sg

Certificate

The complete raw certificate details for prd-tmp.cdn.gowhere.gov.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjScllSbTMXgxOhr3rs62
zCQKwiHyCa3K/RwDaj3SUNZtAhlqJyjlnIBqa+ITCs991Iow2khoN4AJ/YPfjHQE
bvp/RwwQIKsLQPEletqYeQR8RxLY81SjvfuGO2KB+jBsbmFcmGVHL2xtb6vC1LiY
KNXSFtIGUac4KD7VaWCKFPDC90nQjQ7AaGojWvW9NQpcDFVL82yJ0wxZFUp+32BF
QSFnvTkDi14vdi/rWaHHLffw8UInsvd9fxw6UpPaG6v0JR45BalPJJ7mA8hV3gjd
MVgx8EQafrR7OGAE1m/u8yfdf14ZEMkBULht01ao/3m5/LSECJiPQf2Aw0WsyHJV
EwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19551837158199067498519923269156095462
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prd-tmp.cdn.gowhere.gov.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17818905010277279506960292911954041352426180096276382764896669870253426067516503503812099686969876496732124689658124753517353875115129900757016212605557126019051450012117070314754622379960794450532283385674809152791217988180185913732029873212625955290575695410313267908081416250995611175234955215547115956922504199197458548686890037014978316974484212544264922264055383484700049731003105669321611731812976108808884890488199026301088324640452088229451212328952928106002905910987738546054122322771597215845201322960332573376609394490425479425053719619215183679364060156507905574461432393765794319173521170340152031204627
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8931943824be1e2a5de4182eea63c83c44c4521c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prd-tmp.cdn.gowhere.gov.sg'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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